Quiet Period

This scenario shows how to configure the quiet period in a device with 802.1x/MAB authentication.

../../../../../_images/topologydut0dut1.svg

Test Quiet Period In 802.1X Mode

Description

This scenario shows how to configure the quiet period in a device with 802.1x authentication.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set interfaces ethernet eth1 address 192.168.100.1/24
set interfaces ethernet eth1 authenticator 802.1x max-retransmissions 2
set interfaces ethernet eth1 authenticator aaa authentication list1
set interfaces ethernet eth1 authenticator log-level debug
set interfaces ethernet eth1 authenticator mode only-802.1x
set interfaces ethernet eth1 authenticator quiet-period 20
set interfaces ethernet eth1 authenticator reauth-period 0
set system aaa group radius radgroup1 server serv1
set system aaa list list1 method 1 group radius radgroup1
set system aaa server radius serv1 address 10.215.168.1
set system aaa server radius serv1 encrypted-key U2FsdGVkX19oYuM2TM5rIcJ39t2BqsbkODI25qX5BgHC+iLRd3+IlzL5ehlzdYOUqqgX9ogRmAQrL8GqOnpoQw==
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Ping the IP address 10.215.168.1 from DUT0:

admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1
Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data.
64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.316 ms

--- 10.215.168.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.316/0.316/0.316/0.000 ms

Step 3: Set the following configuration in DUT1 :

set interfaces ethernet eth1 address 192.168.100.2/24
set interfaces ethernet eth1 supplicant encrypted-password U2FsdGVkX1/bw+tvK1WPIbfQ5MSv6Ba4Gg4NmylxDYQ=
set interfaces ethernet eth1 supplicant username wrong
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 4: Run the command system journal show | grep "osdx hostapd" on DUT0 and check whether the output contains the following tokens:

Authentication failed, enforcing quiet period
Show output
Jul 24 15:31:03.523574 osdx hostapd[1075167]: eth1: IEEE 802.11 Fetching hardware channel/rate support not supported.
Jul 24 15:31:03.523594 osdx hostapd[1075167]: eth1: RADIUS Authentication server 10.215.168.1:1812
Jul 24 15:31:03.523943 osdx hostapd[1075167]: connect[radius]: Network is unreachable
Jul 24 15:31:03.523633 osdx hostapd[1075167]: eth1: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X, eap_server=0, eap_quiet_period=20, eap_max_retrans=2
Jul 24 15:31:03.523636 osdx hostapd[1075167]: eth1: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode
Jul 24 15:31:03.539977 osdx hostapd[1075167]: Discovery mode enabled on eth1
Jul 24 15:31:03.539977 osdx hostapd[1075167]: eth1: interface state UNINITIALIZED->ENABLED
Jul 24 15:31:03.539977 osdx hostapd[1075167]: eth1: AP-ENABLED
Jul 24 15:31:05.436367 osdx OSDxCLI[1062781]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Jul 24 15:31:07.120756 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: New STA de:ad:be:ef:6c:11 added
Jul 24 15:31:07.120779 osdx hostapd[1075168]: eth1: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode
Jul 24 15:31:07.135484 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: start authentication
Jul 24 15:31:07.135568 osdx hostapd[1075168]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames
Jul 24 15:31:07.135617 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAPOL-Start from STA
Jul 24 15:31:07.135638 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: unauthorizing port
Jul 24 15:31:07.135660 osdx hostapd[1075168]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Jul 24 15:31:07.135711 osdx hostapd[1075168]: IEEE 802.1X: OSDX-EAP: getDecision: no identity known yet -> CONTINUE
Jul 24 15:31:07.135740 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 129)
Jul 24 15:31:07.136596 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=129 len=10) from STA: EAP Response-Identity (1)
Jul 24 15:31:07.136632 osdx hostapd[1075168]: IEEE 802.1X: OSDX-EAP: getDecision: -> PASSTHROUGH
Jul 24 15:31:07.136643 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: STA identity 'wrong'
Jul 24 15:31:07.136735 osdx hostapd[1075168]: eth1: RADIUS Authentication server 10.215.168.1:1812
Jul 24 15:31:07.141576 osdx hostapd[1075168]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:31:07.141643 osdx hostapd[1075168]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:31:07.142207 osdx hostapd[1075168]: eth1: RADIUS Received 80 bytes from RADIUS server
Jul 24 15:31:07.142221 osdx hostapd[1075168]: eth1: RADIUS Received RADIUS message
Jul 24 15:31:07.142230 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:31:07.142282 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=130 len=22) from RADIUS server: EAP-Request-MD5 (4)
Jul 24 15:31:07.142301 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 130)
Jul 24 15:31:07.142936 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=130 len=6) from STA: EAP Response-unknown (3)
Jul 24 15:31:07.143160 osdx hostapd[1075168]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:31:07.143212 osdx hostapd[1075168]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:31:07.143761 osdx hostapd[1075168]: eth1: RADIUS Received 64 bytes from RADIUS server
Jul 24 15:31:07.143780 osdx hostapd[1075168]: eth1: RADIUS Received RADIUS message
Jul 24 15:31:07.143793 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:31:07.143843 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=131 len=6) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:31:07.143865 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 131)
Jul 24 15:31:07.144788 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=131 len=194) from STA: EAP Response-PEAP (25)
Jul 24 15:31:07.144922 osdx hostapd[1075168]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:31:07.144960 osdx hostapd[1075168]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:31:07.147142 osdx hostapd[1075168]: eth1: RADIUS Received 1068 bytes from RADIUS server
Jul 24 15:31:07.147168 osdx hostapd[1075168]: eth1: RADIUS Received RADIUS message
Jul 24 15:31:07.147180 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:31:07.147234 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=132 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:31:07.147253 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 132)
Jul 24 15:31:07.147747 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=132 len=6) from STA: EAP Response-PEAP (25)
Jul 24 15:31:07.147858 osdx hostapd[1075168]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:31:07.147890 osdx hostapd[1075168]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:31:07.148207 osdx hostapd[1075168]: eth1: RADIUS Received 229 bytes from RADIUS server
Jul 24 15:31:07.148225 osdx hostapd[1075168]: eth1: RADIUS Received RADIUS message
Jul 24 15:31:07.148236 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:31:07.148279 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=133 len=171) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:31:07.148298 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 133)
Jul 24 15:31:07.151893 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=133 len=103) from STA: EAP Response-PEAP (25)
Jul 24 15:31:07.152046 osdx hostapd[1075168]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:31:07.152104 osdx hostapd[1075168]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:31:07.152773 osdx hostapd[1075168]: eth1: RADIUS Received 115 bytes from RADIUS server
Jul 24 15:31:07.152787 osdx hostapd[1075168]: eth1: RADIUS Received RADIUS message
Jul 24 15:31:07.152796 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:31:07.152840 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=134 len=57) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:31:07.152855 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 134)
Jul 24 15:31:07.153517 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=134 len=6) from STA: EAP Response-PEAP (25)
Jul 24 15:31:07.153631 osdx hostapd[1075168]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:31:07.153659 osdx hostapd[1075168]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:31:07.154069 osdx hostapd[1075168]: eth1: RADIUS Received 98 bytes from RADIUS server
Jul 24 15:31:07.154093 osdx hostapd[1075168]: eth1: RADIUS Received RADIUS message
Jul 24 15:31:07.154103 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:31:07.154143 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=135 len=40) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:31:07.154157 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 135)
Jul 24 15:31:07.154729 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=135 len=41) from STA: EAP Response-PEAP (25)
Jul 24 15:31:07.154844 osdx hostapd[1075168]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:31:07.154874 osdx hostapd[1075168]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:31:07.155228 osdx hostapd[1075168]: eth1: RADIUS Received 131 bytes from RADIUS server
Jul 24 15:31:07.155244 osdx hostapd[1075168]: eth1: RADIUS Received RADIUS message
Jul 24 15:31:07.155255 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:31:07.155350 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=136 len=73) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:31:07.155368 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 136)
Jul 24 15:31:07.156035 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=136 len=95) from STA: EAP Response-PEAP (25)
Jul 24 15:31:07.156148 osdx hostapd[1075168]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:31:07.156181 osdx hostapd[1075168]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:31:07.156657 osdx hostapd[1075168]: eth1: RADIUS Received 104 bytes from RADIUS server
Jul 24 15:31:07.156673 osdx hostapd[1075168]: eth1: RADIUS Received RADIUS message
Jul 24 15:31:07.156683 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:31:07.156726 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=137 len=46) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:31:07.156742 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 137)
Jul 24 15:31:07.157328 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=137 len=46) from STA: EAP Response-PEAP (25)
Jul 24 15:31:07.157480 osdx hostapd[1075168]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:31:07.157525 osdx hostapd[1075168]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:31:07.557577 osdx OSDxCLI[1062781]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Jul 24 15:31:08.157622 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Resending RADIUS message (id=8)
Jul 24 15:31:08.157655 osdx hostapd[1075168]: eth1: RADIUS Next RADIUS client retransmit in 2 seconds
Jul 24 15:31:08.157857 osdx hostapd[1075168]: eth1: RADIUS Received 44 bytes from RADIUS server
Jul 24 15:31:08.157861 osdx hostapd[1075168]: eth1: RADIUS Received RADIUS message
Jul 24 15:31:08.157864 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:31:08.157905 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=4 id=137 len=4) from RADIUS server: EAP Failure
Jul 24 15:31:08.157930 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 137)
Jul 24 15:31:08.157943 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: unauthorizing port
Jul 24 15:31:08.157946 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP)
Jul 24 15:31:08.157949 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds)
Jul 24 15:31:08.157953 osdx hostapd[1075168]: eth1: RADIUS Received 44 bytes from RADIUS server
Jul 24 15:31:08.157955 osdx hostapd[1075168]: eth1: RADIUS Received RADIUS message
Jul 24 15:31:08.157957 osdx hostapd[1075168]: eth1: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet

Step 5: Run the command system journal show | grep "osdx hostapd" on DUT0 and check whether the output contains the following tokens:

Quiet period expired
Show output
Jul 24 15:31:10.189135 osdx OSDxCLI[1062781]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Jul 24 15:31:12.284104 osdx OSDxCLI[1062781]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Jul 24 15:31:14.356691 osdx OSDxCLI[1062781]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Jul 24 15:31:16.438488 osdx OSDxCLI[1062781]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Jul 24 15:31:18.534682 osdx OSDxCLI[1062781]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Jul 24 15:31:20.614005 osdx OSDxCLI[1062781]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Jul 24 15:31:22.699312 osdx OSDxCLI[1062781]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Jul 24 15:31:24.782533 osdx OSDxCLI[1062781]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Jul 24 15:31:26.864554 osdx OSDxCLI[1062781]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Jul 24 15:31:28.154143 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Quiet period expired (20 seconds), restarting authentication
Jul 24 15:31:28.154158 osdx hostapd[1075168]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Jul 24 15:31:28.154191 osdx hostapd[1075168]: IEEE 802.1X: OSDX-EAP: getDecision: no identity known yet -> CONTINUE
Jul 24 15:31:28.154204 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 136)
Jul 24 15:31:28.154689 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=136 len=10) from STA: EAP Response-Identity (1)
Jul 24 15:31:28.154706 osdx hostapd[1075168]: IEEE 802.1X: OSDX-EAP: getDecision: -> PASSTHROUGH
Jul 24 15:31:28.154711 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: STA identity 'wrong'
Jul 24 15:31:28.154786 osdx hostapd[1075168]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:31:28.154809 osdx hostapd[1075168]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:31:28.155097 osdx hostapd[1075168]: eth1: RADIUS Received 80 bytes from RADIUS server
Jul 24 15:31:28.155104 osdx hostapd[1075168]: eth1: RADIUS Received RADIUS message
Jul 24 15:31:28.155108 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:31:28.155132 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=137 len=22) from RADIUS server: EAP-Request-MD5 (4)
Jul 24 15:31:28.155138 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 137)
Jul 24 15:31:28.155381 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=137 len=6) from STA: EAP Response-unknown (3)
Jul 24 15:31:28.155427 osdx hostapd[1075168]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:31:28.155444 osdx hostapd[1075168]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:31:28.155693 osdx hostapd[1075168]: eth1: RADIUS Received 64 bytes from RADIUS server
Jul 24 15:31:28.155700 osdx hostapd[1075168]: eth1: RADIUS Received RADIUS message
Jul 24 15:31:28.155709 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:31:28.155736 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=138 len=6) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:31:28.155743 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 138)
Jul 24 15:31:28.156097 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=138 len=194) from STA: EAP Response-PEAP (25)
Jul 24 15:31:28.156141 osdx hostapd[1075168]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:31:28.156155 osdx hostapd[1075168]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:31:28.157060 osdx hostapd[1075168]: eth1: RADIUS Received 1068 bytes from RADIUS server
Jul 24 15:31:28.157066 osdx hostapd[1075168]: eth1: RADIUS Received RADIUS message
Jul 24 15:31:28.157070 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:31:28.157108 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=139 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:31:28.157116 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 139)
Jul 24 15:31:28.157362 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=139 len=6) from STA: EAP Response-PEAP (25)
Jul 24 15:31:28.157422 osdx hostapd[1075168]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:31:28.157444 osdx hostapd[1075168]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:31:28.157614 osdx hostapd[1075168]: eth1: RADIUS Received 229 bytes from RADIUS server
Jul 24 15:31:28.157620 osdx hostapd[1075168]: eth1: RADIUS Received RADIUS message
Jul 24 15:31:28.157625 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:31:28.157644 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=140 len=171) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:31:28.157654 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 140)
Jul 24 15:31:28.158890 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=140 len=103) from STA: EAP Response-PEAP (25)
Jul 24 15:31:28.158947 osdx hostapd[1075168]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:31:28.158964 osdx hostapd[1075168]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:31:28.159259 osdx hostapd[1075168]: eth1: RADIUS Received 115 bytes from RADIUS server
Jul 24 15:31:28.159266 osdx hostapd[1075168]: eth1: RADIUS Received RADIUS message
Jul 24 15:31:28.159282 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:31:28.159304 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=141 len=57) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:31:28.159311 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 141)
Jul 24 15:31:28.159628 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=141 len=6) from STA: EAP Response-PEAP (25)
Jul 24 15:31:28.159676 osdx hostapd[1075168]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:31:28.159757 osdx hostapd[1075168]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:31:28.159896 osdx hostapd[1075168]: eth1: RADIUS Received 98 bytes from RADIUS server
Jul 24 15:31:28.159903 osdx hostapd[1075168]: eth1: RADIUS Received RADIUS message
Jul 24 15:31:28.159908 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:31:28.159928 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=142 len=40) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:31:28.159936 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 142)
Jul 24 15:31:28.160177 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=142 len=41) from STA: EAP Response-PEAP (25)
Jul 24 15:31:28.160224 osdx hostapd[1075168]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:31:28.160239 osdx hostapd[1075168]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:31:28.160427 osdx hostapd[1075168]: eth1: RADIUS Received 131 bytes from RADIUS server
Jul 24 15:31:28.160433 osdx hostapd[1075168]: eth1: RADIUS Received RADIUS message
Jul 24 15:31:28.160443 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:31:28.160461 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=143 len=73) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:31:28.160468 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 143)
Jul 24 15:31:28.160819 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=143 len=95) from STA: EAP Response-PEAP (25)
Jul 24 15:31:28.160874 osdx hostapd[1075168]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:31:28.160891 osdx hostapd[1075168]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:31:28.161123 osdx hostapd[1075168]: eth1: RADIUS Received 104 bytes from RADIUS server
Jul 24 15:31:28.161132 osdx hostapd[1075168]: eth1: RADIUS Received RADIUS message
Jul 24 15:31:28.161136 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:31:28.161161 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=144 len=46) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:31:28.161169 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 144)
Jul 24 15:31:28.161424 osdx hostapd[1075168]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=144 len=46) from STA: EAP Response-PEAP (25)
Jul 24 15:31:28.161470 osdx hostapd[1075168]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:31:28.161484 osdx hostapd[1075168]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds

Test Quiet Period In MAB Mode

Description

This scenario shows how to configure the quiet period in a device with MAB authentication.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set interfaces ethernet eth1 address 192.168.100.1/24
set interfaces ethernet eth1 authenticator aaa authentication list1
set interfaces ethernet eth1 authenticator log-level debug
set interfaces ethernet eth1 authenticator mode only-MAB
set interfaces ethernet eth1 authenticator quiet-period 20
set interfaces ethernet eth1 authenticator reauth-period 0
set system aaa group radius radgroup1 server serv1
set system aaa list list1 method 1 group radius radgroup1
set system aaa server radius serv1 address 10.215.168.1
set system aaa server radius serv1 encrypted-key U2FsdGVkX1/e9RG8Y61mrGLgE0FJsroBMxjhfEbdJEtbVpwNOL9vxapOn56OJ/fhWJTmeFrWPu5QN/EFBToyAA==
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Ping the IP address 10.215.168.1 from DUT0:

admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1
Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data.
64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.257 ms

--- 10.215.168.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.257/0.257/0.257/0.000 ms

Step 3: Set the following configuration in DUT1 :

set interfaces ethernet eth1 address 192.168.100.2/24
set interfaces ethernet eth1 mac '00:11:22:33:44:55'
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 4: Run the command system journal show | grep "osdx hostapd" on DUT0 and check whether the output contains the following tokens:

MAB: Authentication failed, entering held state
Show output
Jul 24 15:31:36.273311 osdx hostapd[1075805]: eth1: IEEE 802.11 Fetching hardware channel/rate support not supported.
Jul 24 15:31:36.273327 osdx hostapd[1075805]: eth1: RADIUS Authentication server 10.215.168.1:1812
Jul 24 15:31:36.273608 osdx hostapd[1075805]: connect[radius]: Network is unreachable
Jul 24 15:31:36.273365 osdx hostapd[1075805]: eth1: IEEE 802.1X Initializing IEEE 802.1X: mode=MAB-only, eap_server=0, eap_quiet_period=20, eap_max_retrans=5
Jul 24 15:31:36.273368 osdx hostapd[1075805]: eth1: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode
Jul 24 15:31:36.301163 osdx hostapd[1075805]: Discovery mode enabled on eth1
Jul 24 15:31:36.301229 osdx hostapd[1075805]: eth1: interface state UNINITIALIZED->ENABLED
Jul 24 15:31:36.301229 osdx hostapd[1075805]: eth1: AP-ENABLED
Jul 24 15:31:39.830409 osdx OSDxCLI[1062781]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Jul 24 15:31:41.304019 osdx hostapd[1075806]: eth1: STA 00:11:22:33:44:55 DRIVER: Device discovered, triggering MAB authentication
Jul 24 15:31:41.304055 osdx hostapd[1075806]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added
Jul 24 15:31:41.304063 osdx hostapd[1075806]: eth1: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode
Jul 24 15:31:41.321175 osdx hostapd[1075806]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-only mode: Starting MAB authentication
Jul 24 15:31:41.321209 osdx hostapd[1075806]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query
Jul 24 15:31:41.321223 osdx hostapd[1075806]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55
Jul 24 15:31:41.322875 osdx hostapd[1075806]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55
Jul 24 15:31:41.322886 osdx hostapd[1075806]: eth1: RADIUS Authentication server 10.215.168.1:1812
Jul 24 15:31:41.322955 osdx hostapd[1075806]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:31:41.322982 osdx hostapd[1075806]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:31:42.323089 osdx hostapd[1075806]: eth1: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128)
Jul 24 15:31:42.323129 osdx hostapd[1075806]: eth1: RADIUS Next RADIUS client retransmit in 2 seconds
Jul 24 15:31:42.323356 osdx hostapd[1075806]: eth1: RADIUS Received 20 bytes from RADIUS server
Jul 24 15:31:42.323361 osdx hostapd[1075806]: eth1: RADIUS Received RADIUS message
Jul 24 15:31:42.323367 osdx hostapd[1075806]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:31:42.323371 osdx hostapd[1075806]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response
Jul 24 15:31:42.323426 osdx hostapd[1075806]: eth1: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Jul 24 15:31:42.323429 osdx hostapd[1075806]: eth1: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Jul 24 15:31:42.323438 osdx hostapd[1075806]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Authentication failed, entering held state (quiet period 20 sec)
Jul 24 15:31:42.323442 osdx hostapd[1075806]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Retry timeout registered for 20 seconds
Jul 24 15:31:42.323450 osdx hostapd[1075806]: eth1: RADIUS Received 20 bytes from RADIUS server
Jul 24 15:31:42.323454 osdx hostapd[1075806]: eth1: RADIUS Received RADIUS message
Jul 24 15:31:42.323457 osdx hostapd[1075806]: eth1: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet

Step 5: Run the command system journal show | grep "osdx hostapd" on DUT0 and check whether the output contains the following tokens:

Quiet period expired
Show output
Jul 24 15:31:46.123361 osdx OSDxCLI[1062781]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Jul 24 15:31:50.314740 osdx OSDxCLI[1062781]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Jul 24 15:31:54.517940 osdx OSDxCLI[1062781]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Jul 24 15:31:58.708338 osdx OSDxCLI[1062781]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Jul 24 15:32:02.323979 osdx hostapd[1075806]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Quiet period expired, attempting retry
Jul 24 15:32:02.323989 osdx hostapd[1075806]: eth1: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Jul 24 15:32:02.323992 osdx hostapd[1075806]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first/only mode: Quiet period expired, retrying MAB
Jul 24 15:32:02.323994 osdx hostapd[1075806]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query
Jul 24 15:32:02.324042 osdx hostapd[1075806]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55
Jul 24 15:32:02.324070 osdx hostapd[1075806]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55
Jul 24 15:32:02.324088 osdx hostapd[1075806]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:32:02.324113 osdx hostapd[1075806]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds

Test Quiet Period In MAB-Fallback Mode

Description

This scenario shows how to configure the quiet period in a device with 802.1X/MAB authentication.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set interfaces ethernet eth1 address 192.168.100.1/24
set interfaces ethernet eth1 authenticator 802.1x max-retransmissions 2
set interfaces ethernet eth1 authenticator aaa authentication list1
set interfaces ethernet eth1 authenticator log-level debug
set interfaces ethernet eth1 authenticator mode 802.1x-MAB
set interfaces ethernet eth1 authenticator quiet-period 20
set interfaces ethernet eth1 authenticator reauth-period 0
set system aaa group radius radgroup1 server serv1
set system aaa list list1 method 1 group radius radgroup1
set system aaa server radius serv1 address 10.215.168.1
set system aaa server radius serv1 encrypted-key U2FsdGVkX19rqRpJa1S6Re3RLXPN2o7+wtYvS2ynekCPF5necaHlXcIrRhPmUyo54iuXjpzjmGb3sgruh36R2w==
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Ping the IP address 10.215.168.1 from DUT0:

admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1
Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data.
64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.621 ms

--- 10.215.168.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.621/0.621/0.621/0.000 ms

Step 3: Set the following configuration in DUT1 :

set interfaces ethernet eth1 address 192.168.100.2/24
set interfaces ethernet eth1 mac '00:11:22:33:44:55'
set interfaces ethernet eth1 supplicant encrypted-password U2FsdGVkX18WZLRVBAHPC5GcqZQR/o4G6psP/w6vqXw=
set interfaces ethernet eth1 supplicant username wrong
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 4: Run the command system journal show | grep "osdx hostapd" on DUT0 and check whether the output contains the following tokens:

MAB: Authentication failed, entering held state
Show output
Jul 24 15:32:11.768034 osdx hostapd[1076411]: eth1: IEEE 802.11 Fetching hardware channel/rate support not supported.
Jul 24 15:32:11.769352 osdx hostapd[1076411]: connect[radius]: Network is unreachable
Jul 24 15:32:11.768050 osdx hostapd[1076411]: eth1: RADIUS Authentication server 10.215.168.1:1812
Jul 24 15:32:11.768090 osdx hostapd[1076411]: eth1: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X+MAB-fallback, eap_server=0, eap_quiet_period=20, eap_max_retrans=2, mab_timeout=30
Jul 24 15:32:11.768094 osdx hostapd[1076411]: eth1: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode
Jul 24 15:32:11.791688 osdx hostapd[1076411]: Discovery mode enabled on eth1
Jul 24 15:32:11.791792 osdx hostapd[1076411]: eth1: interface state UNINITIALIZED->ENABLED
Jul 24 15:32:11.791792 osdx hostapd[1076411]: eth1: AP-ENABLED
Jul 24 15:32:15.317800 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added
Jul 24 15:32:15.317850 osdx hostapd[1076412]: eth1: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode
Jul 24 15:32:15.331563 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: start authentication
Jul 24 15:32:15.331592 osdx hostapd[1076412]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames
Jul 24 15:32:15.331596 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB fallback mode: Scheduling MAB trigger in 30 seconds if no 802.1X response
Jul 24 15:32:15.331599 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Timeout registered, will trigger if no 802.1X response
Jul 24 15:32:15.331619 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Cancelled MAB trigger - received 802.1X response
Jul 24 15:32:15.331622 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAPOL-Start from STA
Jul 24 15:32:15.331632 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Jul 24 15:32:15.331641 osdx hostapd[1076412]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Jul 24 15:32:15.331651 osdx hostapd[1076412]: IEEE 802.1X: OSDX-EAP: getDecision: no identity known yet -> CONTINUE
Jul 24 15:32:15.331668 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 25)
Jul 24 15:32:15.332088 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=25 len=10) from STA: EAP Response-Identity (1)
Jul 24 15:32:15.332110 osdx hostapd[1076412]: IEEE 802.1X: OSDX-EAP: getDecision: -> PASSTHROUGH
Jul 24 15:32:15.332116 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong'
Jul 24 15:32:15.332153 osdx hostapd[1076412]: eth1: RADIUS Authentication server 10.215.168.1:1812
Jul 24 15:32:15.334618 osdx hostapd[1076412]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:32:15.334657 osdx hostapd[1076412]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:32:15.334962 osdx hostapd[1076412]: eth1: RADIUS Received 80 bytes from RADIUS server
Jul 24 15:32:15.334970 osdx hostapd[1076412]: eth1: RADIUS Received RADIUS message
Jul 24 15:32:15.334975 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:32:15.335008 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=26 len=22) from RADIUS server: EAP-Request-MD5 (4)
Jul 24 15:32:15.335016 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 26)
Jul 24 15:32:15.335352 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=26 len=6) from STA: EAP Response-unknown (3)
Jul 24 15:32:15.335421 osdx hostapd[1076412]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:32:15.335438 osdx hostapd[1076412]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:32:15.335756 osdx hostapd[1076412]: eth1: RADIUS Received 64 bytes from RADIUS server
Jul 24 15:32:15.335764 osdx hostapd[1076412]: eth1: RADIUS Received RADIUS message
Jul 24 15:32:15.335769 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:32:15.335791 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=27 len=6) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:32:15.335798 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 27)
Jul 24 15:32:15.336312 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=27 len=194) from STA: EAP Response-PEAP (25)
Jul 24 15:32:15.336361 osdx hostapd[1076412]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:32:15.336375 osdx hostapd[1076412]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:32:15.337406 osdx hostapd[1076412]: eth1: RADIUS Received 1068 bytes from RADIUS server
Jul 24 15:32:15.337419 osdx hostapd[1076412]: eth1: RADIUS Received RADIUS message
Jul 24 15:32:15.337423 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:32:15.337450 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=28 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:32:15.337458 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 28)
Jul 24 15:32:15.337787 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=28 len=6) from STA: EAP Response-PEAP (25)
Jul 24 15:32:15.337844 osdx hostapd[1076412]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:32:15.337861 osdx hostapd[1076412]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:32:15.338027 osdx hostapd[1076412]: eth1: RADIUS Received 229 bytes from RADIUS server
Jul 24 15:32:15.338036 osdx hostapd[1076412]: eth1: RADIUS Received RADIUS message
Jul 24 15:32:15.338041 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:32:15.338065 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=29 len=171) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:32:15.338073 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 29)
Jul 24 15:32:15.340154 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=29 len=103) from STA: EAP Response-PEAP (25)
Jul 24 15:32:15.340231 osdx hostapd[1076412]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:32:15.340251 osdx hostapd[1076412]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:32:15.340640 osdx hostapd[1076412]: eth1: RADIUS Received 115 bytes from RADIUS server
Jul 24 15:32:15.340648 osdx hostapd[1076412]: eth1: RADIUS Received RADIUS message
Jul 24 15:32:15.340652 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:32:15.340682 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=30 len=57) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:32:15.340691 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 30)
Jul 24 15:32:15.341102 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=30 len=6) from STA: EAP Response-PEAP (25)
Jul 24 15:32:15.341214 osdx hostapd[1076412]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:32:15.341230 osdx hostapd[1076412]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:32:15.341407 osdx hostapd[1076412]: eth1: RADIUS Received 98 bytes from RADIUS server
Jul 24 15:32:15.341418 osdx hostapd[1076412]: eth1: RADIUS Received RADIUS message
Jul 24 15:32:15.341423 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:32:15.341450 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=31 len=40) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:32:15.341462 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 31)
Jul 24 15:32:15.341834 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=31 len=41) from STA: EAP Response-PEAP (25)
Jul 24 15:32:15.341922 osdx hostapd[1076412]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:32:15.341956 osdx hostapd[1076412]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:32:15.342208 osdx hostapd[1076412]: eth1: RADIUS Received 131 bytes from RADIUS server
Jul 24 15:32:15.342215 osdx hostapd[1076412]: eth1: RADIUS Received RADIUS message
Jul 24 15:32:15.342218 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:32:15.342242 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=32 len=73) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:32:15.342249 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 32)
Jul 24 15:32:15.342706 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=32 len=95) from STA: EAP Response-PEAP (25)
Jul 24 15:32:15.342885 osdx hostapd[1076412]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:32:15.342903 osdx hostapd[1076412]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:32:15.343112 osdx hostapd[1076412]: eth1: RADIUS Received 104 bytes from RADIUS server
Jul 24 15:32:15.343119 osdx hostapd[1076412]: eth1: RADIUS Received RADIUS message
Jul 24 15:32:15.343124 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:32:15.343143 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=33 len=46) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:32:15.343178 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 33)
Jul 24 15:32:15.343476 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=33 len=46) from STA: EAP Response-PEAP (25)
Jul 24 15:32:15.343563 osdx hostapd[1076412]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:32:15.343636 osdx hostapd[1076412]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:32:15.815369 osdx OSDxCLI[1062781]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Jul 24 15:32:16.343745 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=8)
Jul 24 15:32:16.343786 osdx hostapd[1076412]: eth1: RADIUS Next RADIUS client retransmit in 2 seconds
Jul 24 15:32:16.343951 osdx hostapd[1076412]: eth1: RADIUS Received 44 bytes from RADIUS server
Jul 24 15:32:16.343956 osdx hostapd[1076412]: eth1: RADIUS Received RADIUS message
Jul 24 15:32:16.343961 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:32:16.344017 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=33 len=4) from RADIUS server: EAP Failure
Jul 24 15:32:16.344047 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 33)
Jul 24 15:32:16.344062 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Jul 24 15:32:16.344067 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP)
Jul 24 15:32:16.344071 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: 802.1X authentication failed, triggering MAB fallback immediately
Jul 24 15:32:16.344076 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query
Jul 24 15:32:16.344109 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55
Jul 24 15:32:16.344117 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55
Jul 24 15:32:16.344131 osdx hostapd[1076412]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:32:16.344141 osdx hostapd[1076412]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:32:16.344154 osdx hostapd[1076412]: eth1: RADIUS Received 44 bytes from RADIUS server
Jul 24 15:32:16.344157 osdx hostapd[1076412]: eth1: RADIUS Received RADIUS message
Jul 24 15:32:16.344161 osdx hostapd[1076412]: eth1: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet
Jul 24 15:32:17.344259 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128)
Jul 24 15:32:17.344301 osdx hostapd[1076412]: eth1: RADIUS Next RADIUS client retransmit in 2 seconds
Jul 24 15:32:17.344488 osdx hostapd[1076412]: eth1: RADIUS Received 20 bytes from RADIUS server
Jul 24 15:32:17.344495 osdx hostapd[1076412]: eth1: RADIUS Received RADIUS message
Jul 24 15:32:17.344499 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:32:17.344504 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response
Jul 24 15:32:17.344562 osdx hostapd[1076412]: eth1: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Jul 24 15:32:17.344565 osdx hostapd[1076412]: eth1: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Jul 24 15:32:17.344569 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Authentication failed, entering held state (quiet period 20 sec)
Jul 24 15:32:17.344572 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Retry timeout registered for 20 seconds
Jul 24 15:32:17.344581 osdx hostapd[1076412]: eth1: RADIUS Received 20 bytes from RADIUS server
Jul 24 15:32:17.344584 osdx hostapd[1076412]: eth1: RADIUS Received RADIUS message
Jul 24 15:32:17.344587 osdx hostapd[1076412]: eth1: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet

Step 5: Run the command system journal show | grep "osdx hostapd" on DUT0 and check whether the output contains the following tokens:

Quiet period expired
Show output
Jul 24 15:32:22.152451 osdx OSDxCLI[1062781]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Jul 24 15:32:26.338415 osdx OSDxCLI[1062781]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Jul 24 15:32:30.526697 osdx OSDxCLI[1062781]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Jul 24 15:32:34.728044 osdx OSDxCLI[1062781]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Jul 24 15:32:37.345317 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Quiet period expired, attempting retry
Jul 24 15:32:37.345328 osdx hostapd[1076412]: eth1: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Jul 24 15:32:37.345330 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-fallback mode: Quiet period expired, retrying 802.1X
Jul 24 15:32:37.345333 osdx hostapd[1076412]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames
Jul 24 15:32:37.345342 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Jul 24 15:32:37.345347 osdx hostapd[1076412]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Jul 24 15:32:37.345374 osdx hostapd[1076412]: IEEE 802.1X: OSDX-EAP: getDecision: no identity known yet -> CONTINUE
Jul 24 15:32:37.345386 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 49)
Jul 24 15:32:37.345870 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=49 len=10) from STA: EAP Response-Identity (1)
Jul 24 15:32:37.345882 osdx hostapd[1076412]: IEEE 802.1X: OSDX-EAP: getDecision: -> PASSTHROUGH
Jul 24 15:32:37.345887 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong'
Jul 24 15:32:37.345963 osdx hostapd[1076412]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:32:37.345986 osdx hostapd[1076412]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:32:37.346269 osdx hostapd[1076412]: eth1: RADIUS Received 80 bytes from RADIUS server
Jul 24 15:32:37.346275 osdx hostapd[1076412]: eth1: RADIUS Received RADIUS message
Jul 24 15:32:37.346280 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:32:37.346307 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=50 len=22) from RADIUS server: EAP-Request-MD5 (4)
Jul 24 15:32:37.346314 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 50)
Jul 24 15:32:37.346577 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=50 len=6) from STA: EAP Response-unknown (3)
Jul 24 15:32:37.346636 osdx hostapd[1076412]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:32:37.346652 osdx hostapd[1076412]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:32:37.346851 osdx hostapd[1076412]: eth1: RADIUS Received 64 bytes from RADIUS server
Jul 24 15:32:37.346857 osdx hostapd[1076412]: eth1: RADIUS Received RADIUS message
Jul 24 15:32:37.346861 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:32:37.346882 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=51 len=6) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:32:37.346889 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 51)
Jul 24 15:32:37.347283 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=51 len=194) from STA: EAP Response-PEAP (25)
Jul 24 15:32:37.347338 osdx hostapd[1076412]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:32:37.347354 osdx hostapd[1076412]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:32:37.348484 osdx hostapd[1076412]: eth1: RADIUS Received 1068 bytes from RADIUS server
Jul 24 15:32:37.348493 osdx hostapd[1076412]: eth1: RADIUS Received RADIUS message
Jul 24 15:32:37.348497 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:32:37.348525 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=52 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:32:37.348533 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 52)
Jul 24 15:32:37.348760 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=52 len=6) from STA: EAP Response-PEAP (25)
Jul 24 15:32:37.348813 osdx hostapd[1076412]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:32:37.348826 osdx hostapd[1076412]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:32:37.348968 osdx hostapd[1076412]: eth1: RADIUS Received 229 bytes from RADIUS server
Jul 24 15:32:37.348973 osdx hostapd[1076412]: eth1: RADIUS Received RADIUS message
Jul 24 15:32:37.348976 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:32:37.348992 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=53 len=171) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:32:37.348998 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 53)
Jul 24 15:32:37.350201 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=53 len=103) from STA: EAP Response-PEAP (25)
Jul 24 15:32:37.350244 osdx hostapd[1076412]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:32:37.350261 osdx hostapd[1076412]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:32:37.350525 osdx hostapd[1076412]: eth1: RADIUS Received 115 bytes from RADIUS server
Jul 24 15:32:37.350532 osdx hostapd[1076412]: eth1: RADIUS Received RADIUS message
Jul 24 15:32:37.350536 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:32:37.350558 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=54 len=57) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:32:37.350565 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 54)
Jul 24 15:32:37.350835 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=54 len=6) from STA: EAP Response-PEAP (25)
Jul 24 15:32:37.350880 osdx hostapd[1076412]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:32:37.350919 osdx hostapd[1076412]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:32:37.351055 osdx hostapd[1076412]: eth1: RADIUS Received 98 bytes from RADIUS server
Jul 24 15:32:37.351062 osdx hostapd[1076412]: eth1: RADIUS Received RADIUS message
Jul 24 15:32:37.351065 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:32:37.351081 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=55 len=40) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:32:37.351087 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 55)
Jul 24 15:32:37.351279 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=55 len=41) from STA: EAP Response-PEAP (25)
Jul 24 15:32:37.351316 osdx hostapd[1076412]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:32:37.351328 osdx hostapd[1076412]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:32:37.351487 osdx hostapd[1076412]: eth1: RADIUS Received 131 bytes from RADIUS server
Jul 24 15:32:37.351492 osdx hostapd[1076412]: eth1: RADIUS Received RADIUS message
Jul 24 15:32:37.351495 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:32:37.351513 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=56 len=73) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:32:37.351519 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 56)
Jul 24 15:32:37.351765 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=56 len=95) from STA: EAP Response-PEAP (25)
Jul 24 15:32:37.351805 osdx hostapd[1076412]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:32:37.351816 osdx hostapd[1076412]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:32:37.351998 osdx hostapd[1076412]: eth1: RADIUS Received 104 bytes from RADIUS server
Jul 24 15:32:37.352008 osdx hostapd[1076412]: eth1: RADIUS Received RADIUS message
Jul 24 15:32:37.352013 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:32:37.352030 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=57 len=46) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:32:37.352035 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 57)
Jul 24 15:32:37.352245 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=57 len=46) from STA: EAP Response-PEAP (25)
Jul 24 15:32:37.352296 osdx hostapd[1076412]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:32:37.352309 osdx hostapd[1076412]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:32:38.352386 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=17)
Jul 24 15:32:38.352416 osdx hostapd[1076412]: eth1: RADIUS Next RADIUS client retransmit in 2 seconds
Jul 24 15:32:38.352556 osdx hostapd[1076412]: eth1: RADIUS Received 44 bytes from RADIUS server
Jul 24 15:32:38.352560 osdx hostapd[1076412]: eth1: RADIUS Received RADIUS message
Jul 24 15:32:38.352564 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:32:38.352604 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=57 len=4) from RADIUS server: EAP Failure
Jul 24 15:32:38.352628 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 57)
Jul 24 15:32:38.352641 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Jul 24 15:32:38.352645 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP)
Jul 24 15:32:38.352648 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: 802.1X authentication failed, triggering MAB fallback immediately
Jul 24 15:32:38.352653 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query
Jul 24 15:32:38.352687 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55
Jul 24 15:32:38.352695 osdx hostapd[1076412]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55
Jul 24 15:32:38.352706 osdx hostapd[1076412]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:32:38.352716 osdx hostapd[1076412]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:32:38.352730 osdx hostapd[1076412]: eth1: RADIUS Received 44 bytes from RADIUS server
Jul 24 15:32:38.352733 osdx hostapd[1076412]: eth1: RADIUS Received RADIUS message
Jul 24 15:32:38.352736 osdx hostapd[1076412]: eth1: RADIUS No matching RADIUS request found (type=0 id=17) - dropping packet

Test Quiet Period In MAB-First Mode

Description

This scenario shows how to configure the quiet period in a device with MAB/802.1X authentication.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set interfaces ethernet eth1 address 192.168.100.1/24
set interfaces ethernet eth1 authenticator 802.1x max-retransmissions 2
set interfaces ethernet eth1 authenticator aaa authentication list1
set interfaces ethernet eth1 authenticator log-level debug
set interfaces ethernet eth1 authenticator mode MAB-802.1x
set interfaces ethernet eth1 authenticator quiet-period 20
set interfaces ethernet eth1 authenticator reauth-period 0
set system aaa group radius radgroup1 server serv1
set system aaa list list1 method 1 group radius radgroup1
set system aaa server radius serv1 address 10.215.168.1
set system aaa server radius serv1 encrypted-key U2FsdGVkX1/ux9llhho5EsIJx346l9oU3Ab2ZeePJWIDSbcfM/B/FxQ0s5Vm9aY2/JJkQdEOSuG9ROSj2er4rw==
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Ping the IP address 10.215.168.1 from DUT0:

admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1
Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data.
64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.651 ms

--- 10.215.168.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.651/0.651/0.651/0.000 ms

Step 3: Set the following configuration in DUT1 :

set interfaces ethernet eth1 address 192.168.100.2/24
set interfaces ethernet eth1 mac '00:11:22:33:44:55'
set interfaces ethernet eth1 supplicant encrypted-password U2FsdGVkX18meHKlVhrLFJ3BPZ+Pn7KGJH1bsv0Jz7o=
set interfaces ethernet eth1 supplicant username wrong
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 4: Run the command system journal show | grep "osdx hostapd" on DUT0 and check whether the output contains the following tokens:

Authentication failed, enforcing quiet period
Show output
Jul 24 15:32:47.244586 osdx hostapd[1077029]: eth1: IEEE 802.11 Fetching hardware channel/rate support not supported.
Jul 24 15:32:47.244596 osdx hostapd[1077029]: eth1: RADIUS Authentication server 10.215.168.1:1812
Jul 24 15:32:47.244858 osdx hostapd[1077029]: connect[radius]: Network is unreachable
Jul 24 15:32:47.244629 osdx hostapd[1077029]: eth1: IEEE 802.1X Initializing IEEE 802.1X: mode=MAB-first, eap_server=0, eap_quiet_period=20, eap_max_retrans=2, mab_timeout=30
Jul 24 15:32:47.244632 osdx hostapd[1077029]: eth1: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode
Jul 24 15:32:47.272485 osdx hostapd[1077029]: Discovery mode enabled on eth1
Jul 24 15:32:47.272565 osdx hostapd[1077029]: eth1: interface state UNINITIALIZED->ENABLED
Jul 24 15:32:47.272565 osdx hostapd[1077029]: eth1: AP-ENABLED
Jul 24 15:32:50.567703 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added
Jul 24 15:32:50.567720 osdx hostapd[1077030]: eth1: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode
Jul 24 15:32:50.580530 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first mode: Starting MAB authentication
Jul 24 15:32:50.580561 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query
Jul 24 15:32:50.580585 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55
Jul 24 15:32:50.582307 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55
Jul 24 15:32:50.582317 osdx hostapd[1077030]: eth1: RADIUS Authentication server 10.215.168.1:1812
Jul 24 15:32:50.582381 osdx hostapd[1077030]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:32:50.582409 osdx hostapd[1077030]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:32:50.582433 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAPOL-Start from STA
Jul 24 15:32:50.994948 osdx OSDxCLI[1062781]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Jul 24 15:32:51.582500 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128)
Jul 24 15:32:51.582542 osdx hostapd[1077030]: eth1: RADIUS Next RADIUS client retransmit in 2 seconds
Jul 24 15:32:51.582752 osdx hostapd[1077030]: eth1: RADIUS Received 20 bytes from RADIUS server
Jul 24 15:32:51.582755 osdx hostapd[1077030]: eth1: RADIUS Received RADIUS message
Jul 24 15:32:51.582763 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:32:51.582770 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response
Jul 24 15:32:51.582823 osdx hostapd[1077030]: eth1: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Jul 24 15:32:51.582826 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first mode: MAB failed, transitioning to 802.1X
Jul 24 15:32:51.582830 osdx hostapd[1077030]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames
Jul 24 15:32:51.582833 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first: 802.1X authentication started
Jul 24 15:32:51.582851 osdx hostapd[1077030]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Jul 24 15:32:51.582860 osdx hostapd[1077030]: IEEE 802.1X: OSDX-EAP: getDecision: no identity known yet -> CONTINUE
Jul 24 15:32:51.582871 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 222)
Jul 24 15:32:51.582888 osdx hostapd[1077030]: eth1: RADIUS Received 20 bytes from RADIUS server
Jul 24 15:32:51.582891 osdx hostapd[1077030]: eth1: RADIUS Received RADIUS message
Jul 24 15:32:51.582894 osdx hostapd[1077030]: eth1: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet
Jul 24 15:32:51.583262 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=222 len=10) from STA: EAP Response-Identity (1)
Jul 24 15:32:51.583274 osdx hostapd[1077030]: IEEE 802.1X: OSDX-EAP: getDecision: -> PASSTHROUGH
Jul 24 15:32:51.583280 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong'
Jul 24 15:32:51.583339 osdx hostapd[1077030]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:32:51.583354 osdx hostapd[1077030]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:32:51.583568 osdx hostapd[1077030]: eth1: RADIUS Received 80 bytes from RADIUS server
Jul 24 15:32:51.583575 osdx hostapd[1077030]: eth1: RADIUS Received RADIUS message
Jul 24 15:32:51.583578 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:32:51.583596 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=223 len=22) from RADIUS server: EAP-Request-MD5 (4)
Jul 24 15:32:51.583602 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 223)
Jul 24 15:32:51.583914 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=223 len=6) from STA: EAP Response-unknown (3)
Jul 24 15:32:51.583974 osdx hostapd[1077030]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:32:51.583992 osdx hostapd[1077030]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:32:51.584231 osdx hostapd[1077030]: eth1: RADIUS Received 64 bytes from RADIUS server
Jul 24 15:32:51.584239 osdx hostapd[1077030]: eth1: RADIUS Received RADIUS message
Jul 24 15:32:51.584243 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:32:51.584274 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=224 len=6) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:32:51.584281 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 224)
Jul 24 15:32:51.584753 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=224 len=194) from STA: EAP Response-PEAP (25)
Jul 24 15:32:51.584800 osdx hostapd[1077030]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:32:51.584814 osdx hostapd[1077030]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:32:51.585700 osdx hostapd[1077030]: eth1: RADIUS Received 1068 bytes from RADIUS server
Jul 24 15:32:51.585708 osdx hostapd[1077030]: eth1: RADIUS Received RADIUS message
Jul 24 15:32:51.585712 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:32:51.585738 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=225 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:32:51.585747 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 225)
Jul 24 15:32:51.585989 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=225 len=6) from STA: EAP Response-PEAP (25)
Jul 24 15:32:51.586040 osdx hostapd[1077030]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:32:51.586055 osdx hostapd[1077030]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:32:51.586221 osdx hostapd[1077030]: eth1: RADIUS Received 229 bytes from RADIUS server
Jul 24 15:32:51.586226 osdx hostapd[1077030]: eth1: RADIUS Received RADIUS message
Jul 24 15:32:51.586229 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:32:51.586244 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=226 len=171) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:32:51.586254 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 226)
Jul 24 15:32:51.587653 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=226 len=103) from STA: EAP Response-PEAP (25)
Jul 24 15:32:51.587695 osdx hostapd[1077030]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:32:51.587706 osdx hostapd[1077030]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:32:51.587986 osdx hostapd[1077030]: eth1: RADIUS Received 115 bytes from RADIUS server
Jul 24 15:32:51.587990 osdx hostapd[1077030]: eth1: RADIUS Received RADIUS message
Jul 24 15:32:51.587994 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:32:51.588011 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=227 len=57) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:32:51.588017 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 227)
Jul 24 15:32:51.588245 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=227 len=6) from STA: EAP Response-PEAP (25)
Jul 24 15:32:51.588291 osdx hostapd[1077030]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:32:51.588303 osdx hostapd[1077030]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:32:51.588449 osdx hostapd[1077030]: eth1: RADIUS Received 98 bytes from RADIUS server
Jul 24 15:32:51.588457 osdx hostapd[1077030]: eth1: RADIUS Received RADIUS message
Jul 24 15:32:51.588461 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:32:51.588485 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=228 len=40) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:32:51.588493 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 228)
Jul 24 15:32:51.588678 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=228 len=41) from STA: EAP Response-PEAP (25)
Jul 24 15:32:51.588721 osdx hostapd[1077030]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:32:51.588736 osdx hostapd[1077030]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:32:51.588904 osdx hostapd[1077030]: eth1: RADIUS Received 131 bytes from RADIUS server
Jul 24 15:32:51.588910 osdx hostapd[1077030]: eth1: RADIUS Received RADIUS message
Jul 24 15:32:51.588914 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:32:51.588931 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=229 len=73) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:32:51.588938 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 229)
Jul 24 15:32:51.589236 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=229 len=95) from STA: EAP Response-PEAP (25)
Jul 24 15:32:51.589282 osdx hostapd[1077030]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:32:51.589296 osdx hostapd[1077030]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:32:51.589456 osdx hostapd[1077030]: eth1: RADIUS Received 104 bytes from RADIUS server
Jul 24 15:32:51.589462 osdx hostapd[1077030]: eth1: RADIUS Received RADIUS message
Jul 24 15:32:51.589466 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:32:51.589481 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=230 len=46) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:32:51.589488 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 230)
Jul 24 15:32:51.589684 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=230 len=46) from STA: EAP Response-PEAP (25)
Jul 24 15:32:51.589719 osdx hostapd[1077030]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:32:51.589730 osdx hostapd[1077030]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:32:52.589855 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=8)
Jul 24 15:32:52.589910 osdx hostapd[1077030]: eth1: RADIUS Next RADIUS client retransmit in 2 seconds
Jul 24 15:32:52.590327 osdx hostapd[1077030]: eth1: RADIUS Received 44 bytes from RADIUS server
Jul 24 15:32:52.590333 osdx hostapd[1077030]: eth1: RADIUS Received RADIUS message
Jul 24 15:32:52.590339 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:32:52.590393 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=230 len=4) from RADIUS server: EAP Failure
Jul 24 15:32:52.590427 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 230)
Jul 24 15:32:52.590722 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Jul 24 15:32:52.590738 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP)
Jul 24 15:32:52.590742 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds)
Jul 24 15:32:52.590749 osdx hostapd[1077030]: eth1: RADIUS Received 44 bytes from RADIUS server
Jul 24 15:32:52.590753 osdx hostapd[1077030]: eth1: RADIUS Received RADIUS message
Jul 24 15:32:52.590756 osdx hostapd[1077030]: eth1: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet

Step 5: Run the command system journal show | grep "osdx hostapd" on DUT0 and check whether the output contains the following tokens:

Quiet period expired
Show output
Jul 24 15:32:57.248815 osdx OSDxCLI[1062781]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Jul 24 15:33:01.422131 osdx OSDxCLI[1062781]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Jul 24 15:33:05.614679 osdx OSDxCLI[1062781]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Jul 24 15:33:09.864327 osdx OSDxCLI[1062781]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Jul 24 15:33:12.600316 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Quiet period expired (20 seconds), restarting authentication
Jul 24 15:33:12.600332 osdx hostapd[1077030]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Jul 24 15:33:12.600365 osdx hostapd[1077030]: IEEE 802.1X: OSDX-EAP: getDecision: no identity known yet -> CONTINUE
Jul 24 15:33:12.600376 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 43)
Jul 24 15:33:12.600864 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=43 len=10) from STA: EAP Response-Identity (1)
Jul 24 15:33:12.600876 osdx hostapd[1077030]: IEEE 802.1X: OSDX-EAP: getDecision: -> PASSTHROUGH
Jul 24 15:33:12.600882 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong'
Jul 24 15:33:12.600965 osdx hostapd[1077030]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:33:12.600992 osdx hostapd[1077030]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:33:12.601271 osdx hostapd[1077030]: eth1: RADIUS Received 80 bytes from RADIUS server
Jul 24 15:33:12.601278 osdx hostapd[1077030]: eth1: RADIUS Received RADIUS message
Jul 24 15:33:12.601283 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:33:12.601306 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=44 len=22) from RADIUS server: EAP-Request-MD5 (4)
Jul 24 15:33:12.601313 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 44)
Jul 24 15:33:12.601554 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=44 len=6) from STA: EAP Response-unknown (3)
Jul 24 15:33:12.601613 osdx hostapd[1077030]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:33:12.601631 osdx hostapd[1077030]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:33:12.601822 osdx hostapd[1077030]: eth1: RADIUS Received 64 bytes from RADIUS server
Jul 24 15:33:12.601829 osdx hostapd[1077030]: eth1: RADIUS Received RADIUS message
Jul 24 15:33:12.601833 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:33:12.601850 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=45 len=6) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:33:12.601857 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 45)
Jul 24 15:33:12.602193 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=45 len=194) from STA: EAP Response-PEAP (25)
Jul 24 15:33:12.602246 osdx hostapd[1077030]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:33:12.602268 osdx hostapd[1077030]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:33:12.603361 osdx hostapd[1077030]: eth1: RADIUS Received 1068 bytes from RADIUS server
Jul 24 15:33:12.603369 osdx hostapd[1077030]: eth1: RADIUS Received RADIUS message
Jul 24 15:33:12.603373 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:33:12.603398 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=46 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:33:12.603411 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 46)
Jul 24 15:33:12.603611 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=46 len=6) from STA: EAP Response-PEAP (25)
Jul 24 15:33:12.603673 osdx hostapd[1077030]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:33:12.603688 osdx hostapd[1077030]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:33:12.603818 osdx hostapd[1077030]: eth1: RADIUS Received 229 bytes from RADIUS server
Jul 24 15:33:12.603824 osdx hostapd[1077030]: eth1: RADIUS Received RADIUS message
Jul 24 15:33:12.603828 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:33:12.603846 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=47 len=171) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:33:12.603853 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 47)
Jul 24 15:33:12.605267 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=47 len=103) from STA: EAP Response-PEAP (25)
Jul 24 15:33:12.605322 osdx hostapd[1077030]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:33:12.605339 osdx hostapd[1077030]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:33:12.605616 osdx hostapd[1077030]: eth1: RADIUS Received 115 bytes from RADIUS server
Jul 24 15:33:12.605624 osdx hostapd[1077030]: eth1: RADIUS Received RADIUS message
Jul 24 15:33:12.605629 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:33:12.605653 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=48 len=57) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:33:12.605661 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 48)
Jul 24 15:33:12.605924 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=48 len=6) from STA: EAP Response-PEAP (25)
Jul 24 15:33:12.605972 osdx hostapd[1077030]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:33:12.605985 osdx hostapd[1077030]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:33:12.606137 osdx hostapd[1077030]: eth1: RADIUS Received 98 bytes from RADIUS server
Jul 24 15:33:12.606144 osdx hostapd[1077030]: eth1: RADIUS Received RADIUS message
Jul 24 15:33:12.606148 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:33:12.606165 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=49 len=40) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:33:12.606172 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 49)
Jul 24 15:33:12.606365 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=49 len=41) from STA: EAP Response-PEAP (25)
Jul 24 15:33:12.606401 osdx hostapd[1077030]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:33:12.606413 osdx hostapd[1077030]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:33:12.606575 osdx hostapd[1077030]: eth1: RADIUS Received 131 bytes from RADIUS server
Jul 24 15:33:12.606581 osdx hostapd[1077030]: eth1: RADIUS Received RADIUS message
Jul 24 15:33:12.606586 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:33:12.606602 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=50 len=73) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:33:12.606608 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 50)
Jul 24 15:33:12.606887 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=50 len=95) from STA: EAP Response-PEAP (25)
Jul 24 15:33:12.606922 osdx hostapd[1077030]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:33:12.606934 osdx hostapd[1077030]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:33:12.607091 osdx hostapd[1077030]: eth1: RADIUS Received 104 bytes from RADIUS server
Jul 24 15:33:12.607096 osdx hostapd[1077030]: eth1: RADIUS Received RADIUS message
Jul 24 15:33:12.607099 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:33:12.607113 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=51 len=46) from RADIUS server: EAP-Request-PEAP (25)
Jul 24 15:33:12.607118 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 51)
Jul 24 15:33:12.607299 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=51 len=46) from STA: EAP Response-PEAP (25)
Jul 24 15:33:12.607354 osdx hostapd[1077030]: eth1: RADIUS Sending RADIUS message to authentication server
Jul 24 15:33:12.607370 osdx hostapd[1077030]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Jul 24 15:33:13.607494 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=17)
Jul 24 15:33:13.607541 osdx hostapd[1077030]: eth1: RADIUS Next RADIUS client retransmit in 2 seconds
Jul 24 15:33:13.607751 osdx hostapd[1077030]: eth1: RADIUS Received 44 bytes from RADIUS server
Jul 24 15:33:13.607756 osdx hostapd[1077030]: eth1: RADIUS Received RADIUS message
Jul 24 15:33:13.607760 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Jul 24 15:33:13.607807 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=51 len=4) from RADIUS server: EAP Failure
Jul 24 15:33:13.607840 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 51)
Jul 24 15:33:13.607856 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Jul 24 15:33:13.607860 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP)
Jul 24 15:33:13.607863 osdx hostapd[1077030]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds)
Jul 24 15:33:13.607868 osdx hostapd[1077030]: eth1: RADIUS Received 44 bytes from RADIUS server
Jul 24 15:33:13.607870 osdx hostapd[1077030]: eth1: RADIUS Received RADIUS message
Jul 24 15:33:13.607873 osdx hostapd[1077030]: eth1: RADIUS No matching RADIUS request found (type=0 id=17) - dropping packet